forked from wazuh/wazuh-docker
Changing files permissions
This commit is contained in:
@@ -144,3 +144,10 @@ find ${TARGET_DIR} -type f -perm 644 -exec chmod 640 {} \;
|
|||||||
find ${TARGET_DIR} -type f -perm 664 -exec chmod 660 {} \;
|
find ${TARGET_DIR} -type f -perm 664 -exec chmod 660 {} \;
|
||||||
find ${TARGET_DIR} -type f -perm 755 -exec chmod 750 {} \;
|
find ${TARGET_DIR} -type f -perm 755 -exec chmod 750 {} \;
|
||||||
find ${TARGET_DIR} -type f -perm 744 -exec chmod 740 {} \;
|
find ${TARGET_DIR} -type f -perm 744 -exec chmod 740 {} \;
|
||||||
|
|
||||||
|
|
||||||
|
# Fix OpenSearch security plugin permissions
|
||||||
|
chown ${USER}:${GROUP} ${TARGET_DIR}${INSTALLATION_DIR}/opensearch-security/internal_users.yml
|
||||||
|
chown ${USER}:${GROUP} ${TARGET_DIR}${CONFIG_DIR}/opensearch.yml
|
||||||
|
chmod 0600 ${TARGET_DIR}${CONFIG_DIR}/opensearch.yml
|
||||||
|
chmod 0600 ${TARGET_DIR}${INSTALLATION_DIR}/opensearch-security/internal_users.yml
|
||||||
@@ -13,20 +13,6 @@ export CACERT=$(grep -oP "(?<=plugins.security.ssl.transport.pemtrustedcas_filep
|
|||||||
export CERT="${OPENSEARCH_PATH_CONF}/certs/admin.pem"
|
export CERT="${OPENSEARCH_PATH_CONF}/certs/admin.pem"
|
||||||
export KEY="${OPENSEARCH_PATH_CONF}/certs/admin-key.pem"
|
export KEY="${OPENSEARCH_PATH_CONF}/certs/admin-key.pem"
|
||||||
|
|
||||||
|
|
||||||
# Fix OpenSearch security plugin permissions
|
|
||||||
|
|
||||||
chmod -R 0700 ${TARGET_DIR}/.cache
|
|
||||||
chmod 0700 ${TARGET_DIR}/extensions
|
|
||||||
chmod 0700 ${TARGET_DIR}/logs
|
|
||||||
chmod 0600 ${TARGET_DIR}/opensearch.yml
|
|
||||||
find ${TARGET_DIR}/bin -type f -exec chmod 0600 {} \;
|
|
||||||
find ${TARGET_DIR}/jdk/bin -type f -exec chmod 0600 {} \;
|
|
||||||
chmod 0600 ${TARGET_DIR}/opensearch-security/internal_users.yml
|
|
||||||
find ${TARGET_DIR}/performance-analyzer-rca/bin -type f -exec chmod 0600 {} \;
|
|
||||||
chmod 0600 ${TARGET_DIR}/plugins/opensearch-security/tools/wazuh-certs-tool.sh
|
|
||||||
|
|
||||||
|
|
||||||
run_as_other_user_if_needed() {
|
run_as_other_user_if_needed() {
|
||||||
if [[ "$(id -u)" == "0" ]]; then
|
if [[ "$(id -u)" == "0" ]]; then
|
||||||
# If running as root, drop to specified UID and run command
|
# If running as root, drop to specified UID and run command
|
||||||
|
|||||||
Reference in New Issue
Block a user